[Varnish] #209: Blocking IP addresses

[Varnish]

#209: Blocking IP addresses
----------------------+-----------------------------------------------------
 Reporter:  PK07030   |       Owner:  phk             
     Type:  task      |      Status:  new             
 Priority:  normal    |   Milestone:  Varnish 1.2     
Component:  varnishd  |     Version:  trunk           
 Severity:  normal    |    Keywords:  Block IP address
----------------------+-----------------------------------------------------
 Hello everyone,

 I've been using Varnish on my server for about the past 6 months. It's
 been working fine, but I'm in desperate need to block certain IP addresses
 from accessing my site. According to my host, I cannot use Apache to
 block, since Varnish is handling the requests.

 My friend who recommended Varnish suggested this code, but I was
 unsuccessful at getting it to work.

 ''Here is what I would do to solve this issue ASAP:''

 ''At the beginning of the varnish configuration file:''


 {{{
 acl block {
 "69.115.134.27";
 "67.85.5.65";
 "68.193.234.118";
 "128.6.30.205";
 "67.80.151.193";
 "68.196.243.246";
 "68.193.236.128";
 "67.83.204.43";
 "65.173.213.";
 "167.230.38.118";
 "63.139.32.226";
 "208.241.137.80";
 "67.84.137.36";
 "216.110.94.227";
 }
 }}}


 ''And somewhere in the vcl_recv subroutine (preferably first):''


 {{{
 if ( client.ip ~ block ) {
        error 403 "Go away, please";
 }
 }}}

 ''Then just restart Varnish."''


 '''Any suggestions?'''''''

-- 
Ticket URL: <http://varnish.projects.linpro.no/ticket/209>
Varnish <http://varnish.projects.linpro.no/>
The Varnish HTTP Accelerator